Separate backend and proxy edge networks

2026-08-20 19:52:37 +03:00
parent 8b17d30dc8
commit 674f962298
3 changed files with 8 additions and 2 deletions
@@ -9,6 +9,8 @@ It is intentionally separate from the Rocky development Compose project.
 - WeatherTool host binding: `127.0.0.1:8002`
 - Authelia host binding: `127.0.0.1:9091`
 - PostgreSQL: private Docker network only; no host port
+- App-to-database traffic: internal backend network
+- Nginx-to-app/auth traffic: explicit loopback ports through a separate edge network
 - Scheduled provider jobs: disabled
 - Existing VPS applications, networks, volumes, and Nginx sites: untouched